space-cloud
space-cloud copied to clipboard
Add support to block internet egress in services
The problem faced currently?
Sometimes it is necessary to block internet egress in services. While istio supports doing this, we don't. We should add support for this.
How can we solve it?
The sidecar config for istio already supports restricting egress as shown here: https://istio.io/latest/docs/reference/config/networking/sidecar/#OutboundTrafficPolicy-Mode. Currently we set it as ALLOW_ANY with no means of changing it. In the service config, we should add a outboundTrafficPolicy to accept this parameter.
If you want this feature to be implemented, give it a thumbs up reaction, so that we can determine which features are important to you. 👍